Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233322e302f32322d3332203d3e20323635343836.roa
File:                     3136382e3139372e3233322e302f32322d3332203d3e20323635343836.roa (raw, json)
Hash identifier:          HZi5CzFO9ZZSDN/g7Q2QBCvVpWXpxWfjtbr8cMUEXHc=
Subject key identifier:   2E:BA:8F:0A:DA:1A:43:36:8C:93:9A:CD:59:8D:FD:88:4C:40:C4:58
Certificate issuer:       /CN=007E122DB08A60156FE8EF319C8C728D75D4FE75
Certificate serial:       2F6444130142707F363F0ED3225913C6C75EBFD5
Authority key identifier: 00:7E:12:2D:B0:8A:60:15:6F:E8:EF:31:9C:8C:72:8D:75:D4:FE:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/007E122DB08A60156FE8EF319C8C728D75D4FE75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233322e302f32322d3332203d3e20323635343836.roa
Signing time:             Tue 11 Aug 2026 00:28:57 +0000
ROA not before:           Tue 11 Aug 2026 00:23:57 +0000
ROA not after:            Tue 10 Aug 2027 00:28:57 +0000
asID:                     265486
IP address blocks:        168.197.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/007E122DB08A60156FE8EF319C8C728D75D4FE75.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/007E122DB08A60156FE8EF319C8C728D75D4FE75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/007E122DB08A60156FE8EF319C8C728D75D4FE75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 16:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:64:44:13:01:42:70:7f:36:3f:0e:d3:22:59:13:c6:c7:5e:bf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007E122DB08A60156FE8EF319C8C728D75D4FE75
        Validity
            Not Before: Aug 11 00:23:57 2026 GMT
            Not After : Aug 10 00:28:57 2027 GMT
        Subject: CN=2EBA8F0ADA1A43368C939ACD598DFD884C40C458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:73:5f:da:1c:9b:fb:22:b2:cd:e1:14:58:26:
                    b2:5d:c9:97:04:f9:49:0e:74:fc:92:86:d6:39:a5:
                    6a:ec:48:98:9e:c7:d8:97:c5:a8:d5:ea:07:cb:de:
                    e1:2c:b7:5d:ea:db:52:0b:69:3b:04:a1:2a:fb:c4:
                    7d:a5:a6:73:a2:06:98:ca:28:85:3d:ea:8d:13:f9:
                    d4:e7:b3:52:65:1c:5d:8c:88:4c:f2:9d:a4:9c:de:
                    46:cc:58:63:fd:ce:8e:6d:96:e9:40:d5:8a:66:f3:
                    fd:66:a1:64:90:d5:f6:ff:81:cb:e2:23:59:8f:ea:
                    fc:1f:54:77:94:03:74:39:65:6a:90:d7:4b:64:aa:
                    68:69:67:7f:23:7c:6c:85:52:37:3c:1d:0e:54:f5:
                    ff:7d:7f:ae:cc:8c:37:e7:3c:6b:09:3d:cb:50:a4:
                    a7:65:52:4d:48:23:30:75:1f:cb:fe:99:1d:bb:38:
                    10:23:46:13:30:9c:15:24:2f:bb:93:37:84:3e:18:
                    a1:53:0b:32:a1:20:02:6e:61:a5:30:9f:d5:a3:d8:
                    46:c8:f8:ca:89:f4:17:ab:47:f3:d7:db:9a:02:53:
                    be:c0:78:8b:c0:ad:14:d4:f7:97:23:a0:c7:37:b7:
                    e1:c8:33:22:ae:d2:f6:e1:a5:e0:12:dc:72:d4:df:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BA:8F:0A:DA:1A:43:36:8C:93:9A:CD:59:8D:FD:88:4C:40:C4:58
            X509v3 Authority Key Identifier:
                keyid:00:7E:12:2D:B0:8A:60:15:6F:E8:EF:31:9C:8C:72:8D:75:D4:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/007E122DB08A60156FE8EF319C8C728D75D4FE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/007E122DB08A60156FE8EF319C8C728D75D4FE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233322e302f32322d3332203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:cb:ca:69:83:94:3c:82:11:23:29:c1:c7:e0:7d:17:13:11:
         c7:e0:34:d4:aa:5b:c5:46:c2:bb:98:ad:37:89:2b:81:1b:f4:
         65:dc:d1:8e:17:c4:c0:a9:f1:1c:9d:65:67:9f:38:d1:2d:8e:
         a9:d4:66:c8:b5:8d:b8:54:a4:95:82:74:f0:7c:8f:55:47:57:
         71:f5:ff:45:0d:d0:36:7c:41:62:ea:46:67:f2:f2:d9:ad:41:
         a3:2f:72:5a:a7:b0:b3:8a:dd:43:c1:fc:ea:18:97:58:ac:f6:
         b1:a4:99:be:35:80:6d:5f:f4:11:96:fc:f9:6e:9f:dc:7c:d0:
         36:7e:e9:91:6b:8e:72:83:81:de:10:67:67:56:58:c2:ac:bf:
         3f:c1:5d:fc:3c:7c:17:c0:91:7b:c9:68:fa:70:91:31:a9:89:
         43:75:f9:48:e4:4c:da:19:d8:12:4b:88:e5:f5:52:c5:8a:15:
         72:68:32:e2:55:d1:65:45:a1:e9:8f:d7:c5:a5:54:97:3d:51:
         57:3c:2a:bc:02:6e:59:12:ff:bb:ae:08:db:6f:35:ae:d2:01:
         09:0d:22:bd:fe:5b:1c:24:d3:df:9e:03:d9:25:10:a2:89:41:
         59:bc:bd:6f:41:4a:25:9b:70:de:2e:c2:a9:bb:83:e1:c7:87:
         58:cd:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:03:10 2026 by rpki-client